Arcserve UDP: Enterprise Backup Ledger 2026

Part of the Enterprise Backup Ledger (edition 2026-10-03). How the scores work: methodology.

Snapshot

Tier: Mid-market / MSP
Owner: Arcserve; controlling-owner chronology not established in accepted fact base, midpoint ownership estimate.
Licence model: UDP editions/server/socket/capacity offers vary by region; immutable storage/runbooks separate, dedicated storage expiry can stop restores.
Products scored: UDP 10.x/11 documented features; Arcserve Backup tape integration and cloud services labelled separately.
Latest release: UDP11 launch 2026-06-11; exact GA/build not found
Next signal: AI forecasting / anomaly detection / workflow automation: Future in UDP10 announcement; feature-specific GA confirmation not found
Archetype: Recovery validation suite
Evidence grade: C. Overall grade uses all scored history/AI steps and lens criteria: 35 A, 0 B, 15 C of 50; the lowest grade covering more than 25% wins. Judgement itself does not demote a sourced fact; unresolved eligibility, baseline or contract estimates do.

Scope of the scores: Product capability cutoff 2026-10-01; scoring edition 2026-10-03. Combined portfolio scores do not imply one SKU or uniform feature parity. History is evidence-bounded; freezes and first-feature GA dates can be incomplete. AI services named in the AI section do not broaden the ten core domains.

Scorecard

Dimension	Score	Direction
Capability today	72.4 / 100	higher is better
Momentum since end of 2022	+4.8 points	higher is better
Credibility	14.5 / 25	higher is better
Commercial risk	15.0 / 25	lower is better
Technical lock-in	13.5 / 25	lower is better
Integrator fit	13.0 / 20	higher is better
AI leverage	7.0 / 20	higher is better
Ledger Index	56.7 / 100	balanced weights

Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Virtual and physical servers (12)	3	3.5	3.5	3.5
Databases and applications (12)	3	3	3	3
Recovery (14)	3	4	4	4
Cyber resilience (14)	1	1	3	4
Storage efficiency and targets (10)	3	3.5	4	4
Long-term retention and tape (6)	3	3	3	3.5
Replication and DR (10)	2.5	3.5	3.5	3.5
Security and compliance (8)	2	2.5	3	3
New-platform support (VMware exit) (8)	1	3	3	3.5
Management at scale and automation (6)	3	3.5	3.5	4
Total / 100	48.6	60.2	67.6	72.4

Year by year: 2016: 48.6 · 2017: 53.4 · 2018: 53.4 · 2019: 60.2 · 2020: 60.2 · 2021: 66.8 · 2022: 67.6 · 2023: 67.6 · 2024: 69.0 · 2025: 71.0 · 2026: 72.4

What moved the score

Year	Domain	Change	Points	Trigger
2017	Recovery	3 → 4	+2.8	End-2019 checkpoint: Earlier 6.5 cumulative guide documents agentless file restore to original VM and AssuredRecovery tests, AWS/Azure virtual standby/instantVM. Linux health test uses InstantVM; Windows also InstantVirtualDisk. Carry-forward minimum, not complete 7.0 end 2019 support matrix. UDP 6.5 January2017 launch is the documented testing/instant-recovery basis; cumulative 2018 guide corroborates. Evidence A. v65guide; v65u2blog
2017	Replication and DR	2.5 → 3.5	+2.0	End-2019 checkpoint: Base 6.5 launch by January 31 2017 documents AWS remote DR, scheduled non-disruptive tests and RTO/RPO reports; 6.5U2 adds Azure standby/instantVM. Carry-forward minimum, not a complete end 2019 topology/SLA guarantee. UDP 6.5 AWS DR and testing launch Jan2017; Azure changes follow U2. Evidence A. v65launch; v65u2blog
2019	Management at scale and automation	3 → 3.5	+0.6	End-2019 checkpoint: 6.5 cumulative guide documents VMware-container automatic protection, Hyper-V auto-protection in Update2, RTO/RPO reports and cross-console replication. Complete 7.0 end 2019 limits require separate guide. Evidence A. v65guide; v65u2blog
2019	New-platform support (VMware exit)	1 → 3	+3.2	End-2019 checkpoint: UDP 7.0 base documents agentless AHV VM backup, Windows recovery points as AHV virtual standby, Linux InstantVM and AssuredRecovery. Base lists AOS 5.5.3.1/5.10. VMware/Hyper-V modes differ; no Proxmox source protection inferred from Linux KVM recovery targets. Evidence A. v7guide; p7
2019	Security and compliance	2 → 2.5	+0.8	End-2019 checkpoint: 6.5Update1 explicitly adds ActiveDirectory groups as RBACroles. Later 7.0U2TLS changes are not backdated to 2019. First U1download date unresolved; guide 2018 copyright confirms pre 2019 family evidence. Evidence A. v65u1features; v65guide
2019	Storage efficiency and targets	3 → 3.5	+1.0	End-2019 checkpoint: Carry-forward UDP 6.5 RPS deduplication, compression, recovery-point replication and disk/cloud copy; 6.5U2 Azure target enhancements.7.0 base adds DellEMCUnity hardware snapshots in Hyper-V. Complete frozen target/HCL inventory remains unresolved. Evidence A. v65guide; v65u2blog; v7guide
2019	Virtual and physical servers	3 → 3.5	+1.2	End-2019 checkpoint: Carry-forward UDP 6.5 VMware/Hyper-V protection and Windows/Linux agents, with container automatic protection; UDP 7.0 launch adds AHV. The opened 7.0 guide separates base features from later updates, but its compatibility list is cumulative. No frozen end 2019 OS inventory claimed. Evidence A. v65guide; p7; v7guide
2021	Cyber resilience	1 → 3	+5.6	End-2022 checkpoint: 8.0 immutable recovery-point copy to S3; 8.1 adds Wasabi/NutanixObjectLock. Backupengine mutability and repository lockmode remain separate; MFA login exceptions documented. UDP8 ObjectLock introduced in 2021; not preview Sophos claim. Evidence A. v80features; v81enhance; v81mfalimit
2021	Storage efficiency and targets	3.5 → 4	+1.0	End-2022 checkpoint: UDP 8.0 S3 ObjectLock recovery-point copy; 8.1 adds Wasabi/NutanixObjectLock and keeps separate tape integration. Target-specific lock modes and capacity limits require frozen HCL; carry-forward from 2021, not a new 2022 first GA. Evidence A. v80features; v81enhance; v81tape
2022	Security and compliance	2.5 → 3	+0.8	End-2022 checkpoint: 8.1 console MFA introduced; domain IWA logins excluded and email OTP limitation for TLS 1.2SMTP.8.1 drops older NutanixAHV/vSphere 6.0/5.5 support; no universal MFA coverage claim. Evidence A. v81new; v81mfalimit; v81drop
2024	Cyber resilience	3 → 3.5	+1.4	UDP 10.0 full RN (2024 release family; globalannouncement Oct 15; JapanorderNov1/shipmentNov7): Windows-only AssuredSecurity malware scan; GCP/ad-hoc standby; read-only datastore import and one-to-many replication; SQLmount/TLS 1.3/metadata sockets replace shared-folder dependency. Evidence A. r100features; jp10price; p10
2025	Cyber resilience	3.5 → 4	+1.4	UDP 10.2 full RN (2025 release family; exact first GA unresolved): Onprem/CloudCyberResilientDatastore immutable snapshots (minimum RPS 10.2); dedicatedaccount/trial workflows; add/importAWS/Azure/GCP datastores. 10.1CloudConsole-only offering distinguished from 10.2RPS requirement. Evidence A. r102features; r101features; p102
2025	Long-term retention and tape	3 → 3.5	+0.6	Observed by 2026-10-01: UDP 10.2 console-controlled immutable stores; separate Cyber Resilient Storage 10.1CloudConsole-only ACS/immutable datastores differ from 10.2RPSminimum. Subscriptionexpiry can stopdedicatedstoragerecoveryafter 31 days. Separate immutable storage services and retention controls; native UDP tape not inferred. Evidence C. p8; p102; r101features; r102features; storageExpiry
2026	Management at scale and automation	3.5 → 4	+0.6	Observed by 2026-10-01: UDP11 SaaS or on-prem console; ArcGenie guided answers Optional hosted/onprem consoles; current tenant/API depth incomplete. Evidence C. p9; p11
2026	New-platform support (VMware exit)	3 → 3.5	+0.8	UDP 11.0 full RN (2026 family; Jun 11 press; JapanpromisedAug17download/Aug19licences/Sep10packages): ProxmoxVM protection/recovery/filemount; preservecustom Windows/Linuxagentcertificates; NTFSallocation2MiB; incrementalmalwarescan/ReFS 3.1/3.4/3.7. Currentincrementalscan cannot detectmoved/renamedfiles; enhancement explicitly future. Launch/versioned RN plus scheduled Japan availability, not independently matched global GA: at most half-step above AHV. Evidence C. r110features; jp11price; p11

Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-01	Approximately15 percent price increase versus preceding version, attributed by vendor to inflation/yen exchange changes; 8.x prices unchanged. AssuredRecovery becomes Advanced entitlement (previously Premium/PremiumPlus). Japan orders Jan 23,shipment Feb 1. (clock: 2023-01-13 / Japan 9.0 orders Jan 23)	D3 Recovery	C
2023-01	RHEL9-family BMR/InstantVM: shipped; documented by 2024-10-31 10.0 notice. not computable without first GA; 9.0 notice excludes BMR/IVM on RHEL9; 10.0 notice explicitly supports RHEL9-family recovery. Delivery documented, exact first support GA not established.	D3 Recovery	C
2023-12	9.2 Japan package/media orders moved Dec 15→Jan 9 2024 (25 days) andshipment Dec 20→Jan 12 (23 days). No price/SKU changes; maintenance/subscription/key eligibility retained. Not a23-day global software GA delay. (clock: 2023-12-14 schedule revision)	D12 Packaging and licensing	P
2023-12	9.2 Japanese package/media shipment: slipped; not established. 23 days promised shipment revision; Dec 14 correction moves shipment Jan 12; actualdispatch unverified. 25-day orderdate and 23-day shipmentdate postponements kept separate.	D12 Packaging and licensing	P
2024-10	Future AI risk/anomaly/forecasting/workflow features: partial; UDP 10.3 anomaly documented; exact first GA unresolved. AIanomalyprotection documented with Windows/UNC/NFSscope; ArcGenie conversationalguidance distinct. Forecasting/autonomousworkflow promises notfully established.	D10 Scale and automation	C
2024-10	New10.x prices; 9.x prices unchanged. Japanese9.x new sales end Dec 27 2024,maintenance renewals Mar 31 2025 foreligible Jun 30-expiry contracts.8.x support termination scheduled Oct 31 2025. Newcapacity licences remove bundled M365 (adjacent scope). (clock: 2024-10-31 / Japan10 orders Nov 1)	D12 Packaging and licensing	P
2024-10	UDP10: Launch: backup/pre-restore malware scan; one-to-many replication (clock: 2024-10-15)	D4 Cyber resilience	C
2025-03	ArcserveBackup AIX/Solaris/HP-UX new/renewal sales end May 1 2025; best-effort effective notice, support ends Apr 30 2026. Explicitly applies to Backup UNIXagents bundled in UDP Premium/PremiumPlus. Not a blanket claim UDPWindows/Linux support ends. (clock: 2025-03-18 UNIX-agent lifecycle)	D10 Scale and automation	C
2025-04	Lightning global partner programme launched: Associate/Premier/Elite tiers; unified deal registration/incumbency and recurring-revenue incentives. (clock: 2025-04-02)	D11 Ecosystem openness	V
2025-07	UDP 10.2: Release: integrated immutable storage controls (clock: 2025-07-22)	D4 Cyber resilience	C
2026-06	ArcGenie assistant: partial; 2026-07 Console SaaS RN. SaaS edition delivery confirmed; separate on-prem delivery/first GA unresolved; read/guidance only per help.	D7 AI-assisted operations	V
2026-06	ArcGenie assistant: partial; Exact first software GA unverified. Natural-language help, troubleshooting and health guidance; no autonomous restore permission evidence recovered.	D7 AI-assisted operations	V
2026-06	UDP11 footnotes: DR Runbooks and Cyber Resilient Storage each require additional purchase (clock: 2026-06-11)	D4 Cyber resilience	C
2026-06	UDP11: Launch/showcase: agentless Proxmox; ArcGenie; DR Runbooks. Separate GA date not found. (clock: 2026-06-11)	D1 Virtual and physical servers	M
2026-07	JapanUDP11 download and editions: pending; not independently established. not computable; Jul 24 correction adds CRS2/priceeffectiveness and old SKU cutoff; promiseddownload not assumed verifiedbinary GA.11 press announcement recorded separately.	D10 Scale and automation	C

Centre of gravity: Packaging and licensing (3), Scale and automation (3), Cyber resilience (3)
Driver mix: Vision 20%, Customer need 53%, Market window 7%, Upstream 0%, Portfolio 20%

Credibility: 14.5 / 25

Criterion	Score	Basis
Cadence	3.5	27 recorded release rows, including maintenance and component overlaps; rows are not distinct GA counts. Regularity judged from the dated tables, not an asserted promised cadence. UDP10 (2024-10-15): Launch: backup/pre-restore malware scan; one-to-many replication Evidence A. p10
Roadmap transparency	3	Public documentation access and versioned release evidence determine this score. Accepted roadmap finding: not found; launch-event and press promises used. No open-roadmap-tracker reference score is awarded. UDP10 (2024-10-15): Launch: backup/pre-restore malware scan; one-to-many replication Evidence A. p10
Say-do	2	Recorded ledger: 7 items; 1 shipped, 3 partial, 1 slipped, 2 pending, 0 dropped. Mature dated prospective cohort: 3; 0 documented within 12 calendar months, 1 later than 12 months, 2 unresolved. Month-only/ambiguous clocks, same-day release notices and post-release blogs are excluded from that cohort. Pending is unverified, not failure; the ledger is a bounded sample. Evidence C for the rubric estimate: calibrated to the delivery record below, not a measured census percentage. See the vendor research section F.
Velocity	3.5	Substantive capabilities in the release tables determine velocity; maintenance-only rows do not become new features. UDP 11.0 full RN (2026 family; Jun 11 press; JapanpromisedAug17download/Aug19licences/Sep10packages): ProxmoxVM protection/recovery/filemount; preservecustom Windows/Linuxagentcertificates; NTFSallocation2MiB; incrementalmalwarescan/ReFS 3.1/3.4/3.7. Currentincrementalscan cannot detectmoved/renamedfiles; enhancement explicitly future. Evidence A. r110features; jp11price; p11
Lifecycle stability	2.5	Accepted lifecycle finding: Formal UDP version lifecycle policy not found.. Grade C where current contract/EOS boundaries remain unresolved. 2026 Japan11 list price / comparison with 2024 Japan10 list: Advanced1TB annual subscription: JPY148,000→251,000 beforetax (69.6 percent derived); Premiumsocket annual JPY101,000→172,000 (70.3 percent). 11AdvancedServer annual JPY52,000 unchanged per exception. Version/region/SKU lists compared, not a global or every-customer renewal rate. Evidence C. jp10price; jp11price

Say-do record, 2023 to 2026: Recorded ledger: 7 items; 1 shipped, 3 partial, 1 slipped, 2 pending, 0 dropped. Mature dated prospective cohort: 3; 0 documented within 12 calendar months, 1 later than 12 months, 2 unresolved. Month-only/ambiguous clocks, same-day release notices and post-release blogs are excluded from that cohort. Pending is unverified, not failure; the ledger is a bounded sample.

Commercial risk: 15.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	3.5	Japan9 approximately 15% increase and selected Japan11 subscription SKUs about 70% versus Japan10 are documented; not a global/all-customer increase. 2023-01-13 / Japan 9.0 orders Jan 23: Approximately15 percent price increase versus preceding version, attributed by vendor to inflation/yen exchange changes; 8.x prices unchanged. AssuredRecovery becomes Advanced entitlement (previously Premium/PremiumPlus). Japan orders Jan 23,shipment Feb 1. 2026 Japan11 list price / comparison with 2024 Japan10 list: Advanced1TB annual subscription: JPY148,000→251,000 beforetax (69.6 percent derived); Premiumsocket annual JPY101,000→172,000 (70.3 percent). 11AdvancedServer annual JPY52,000 unchanged per exception. Version/region/SKU lists compared, not a global or every-customer renewal rate. Evidence A. jp90price; jp10price; jp11price
Purchase constraints	3	Licence metrics, edition gates and purchase routes determine this estimate; undisclosed minimums are not assumed zero. Current bundle exclusions: Runbooks and Cyber Resilient Storage paid separately; exact list prices/minimums not found Evidence A. p11
Channel and access	2	Partner entry and public documentation access are both considered. Research documentation finding: notes. Partner programme: Partner-success page opened; exact incentives, certification obligations and adoption counts not established Evidence A. partner
Owner stability	2.5	2026-10-01 evidence boundary: Arcserve; controlling-owner chronology not established in accepted fact base, midpoint ownership estimate. Ownership-risk judgement comes from the recorded corporate/financing events; no unrecorded transaction is assumed. Provisional rubric estimate; unknown terms are not evidence of either zero risk or the worst terms. Evidence C.
Cost of staying supported	4	UNIX agent support ends April2026; dedicated storage restores stop 31 days after expiry, not all perpetual UDP restoration. JapanUNIX bundled-agent exit: Best-effort support can close case without further assistance if no known fix; all UNIXagent support ends Apr 30 2026. BundledUDP edition customers are explicitly affected. Storage subscription/capacity enforcement / current 2026 guide: ACRS/ACS/ACCRS operate withgraduated subscription/capacity restrictions. 31 days aftersubscriptionexpiry allrecoveryoperations stop andfeaturesaregreyedout. NotassertedallUDPperpetualenginerestores stop; dedicatedstorage-service entitlement boundary matters. 10.3RN sayscapacity exhaustionrequiresmorecapacityevenwithactivelicence. Evidence A. jpunixeol; storageExpiry; r103features

Security record of the product itself: No in-scope match located in the accepted security-record.md manual product-name filter of the CISA 2026-09-30 catalogue; no deduction. This is not an exhaustive advisory audit or a claim of no exploitation. Arcserve CVE-2015-4068 was added to KEV in 2022, outside the adjustment window. Adjacent array/infrastructure/hosting-plugin CVEs are excluded. Security record: CISA Known Exploited Vulnerabilities catalogue and vendor advisories.

Technical lock-in: 13.5 / 25 (lower is better)

Criterion	Score	Basis
Formats	3.5	2026-10-01 evidence boundary: Independent backup-format specification/readability is not established in the accepted research. Provisional format-dependency estimate, not proof that only a running licensed instance can read it. Provisional rubric estimate; unknown terms are not evidence of either zero risk or the worst terms. Evidence C.
Export path	3.5	Dedicated storage expiry obstructs recovery; independent UDP extractor and all engine rights remain unresolved. Storage subscription/capacity enforcement / current 2026 guide: ACRS/ACS/ACCRS operate withgraduated subscription/capacity restrictions. 31 days aftersubscriptionexpiry allrecoveryoperations stop andfeaturesaregreyedout. NotassertedallUDPperpetualenginerestores stop; dedicatedstorage-service entitlement boundary matters. 10.3RN sayscapacity exhaustionrequiresmorecapacityevenwithactivelicence. Evidence C. storageExpiry; r103features
Stack coupling	2	The documented component/management stack is considered; cross-workload or cross-hypervisor recovery is not inferred from an API. Recovery stack: Runbooks operate on Arcserve Cloud Storage/Cyber Resilient Storage sources and deploy real AWS resources; cloud bills/exit rights not audited. Evidence C. p11
Hardware / cloud coupling	2	Deployment/service dependencies determine this score; missing offline/hardware terms are a provisional estimate. Recovery stack: Runbooks operate on Arcserve Cloud Storage/Cyber Resilient Storage sources and deploy real AWS resources; cloud bills/exit rights not audited. Evidence C. p11
Skills and tooling coupling	2.5	Named training and product-specific administration imply some skills coupling; no unsourced scarcity/headcount claim. Partner programme: Partner-success page opened; exact incentives, certification obligations and adoption counts not established Evidence A. partner

Integrator fit: 13.0 / 20

Criterion	Score	Basis
Partner programme openness	3.5	Lightning Associate/Premier/Elite routes documented in 2025. Partner programme / launch 2025: Lightning tiers Associate/Premier/Elite; channel rules, recurring-revenue rewards, deal protection and tier incentives. Evidence A. lightning25
Multi-tenancy and self-service	3	Documented tenant/provider isolation and self-service earn credit; reporting or multi-site visibility alone does not prove billing/tenant self-service. Observed by 2026-10-01: UDP11 SaaS or on-prem console; ArcGenie guided answers Evidence C. p9; p11
API and infrastructure-as-code	3	Documented APIs and official IaC earn credit. Community examples and publisher-owned repositories do not automatically imply vendor support. Observed by 2026-10-01: UDP11 SaaS or on-prem console; ArcGenie guided answers Evidence C. p9; p11
Skills and certification	3.5	UDP Certified Engineer plus sales credential course/assessment; first launch unverified. Certifications / observed 2025-06-05; first launch unresolved: UDP Certified Engineer; Certified Sales Enablement: UDP10; course plus assessment; certifications valid two years. SaaS/storage credentials listed separately in source, not on-prem domain evidence. Evidence A. academy25

AI leverage: 7.0 / 20

Strand	Today	Latest step
AI for protection / protecting AI	2.5	2025: UDP 10.3 versioned RN; firstfeature GA unresolved; Documented protection AI: AIAnomalyDetection is configurable secondarytask overrecoverypoints: baselinebehavior, suspiciousnames, encryptionpatterns, massdeletions/renames; flagsrecoverypoints/reports. Guide only Windows and UNC/NFSnodes, not Server2008R2orolder. Plans may includeagentless VMbackup but Windows eligibility remains; notuniversal Linuxscan. Model/independentaccuracy notpublished. UDP 10.3 documented available protection AI, Windows/UNC/NFS eligible; model and first-GA day unresolved. Evidence A. r103features; aiTask10
AI platform stack	0	2016: 2016 initial scoring observation: no affirmative released in-scope AI evidence is credited in this strand. Zero is an evidence-bounded score, not a claim that the capability was absent. Evidence C.
AI-assisted operations	3	2026: 2026-07 Console SaaS RN; Documented available: ArcGenie provides predefined health/protection/storage/recovery/security summaries, knowledge-base replies and navigation. Limitations explicitly prohibit system actions/configuration changes, uploads and analytics. No on-prem availability inferred from SaaS help. Console SaaS ArcGenie documented available read/guidance; no actions/configuration/analytics, no onprem parity assumed. Evidence A. arcJuly26; arcAIlimit
Agent openness	1.5	2016: End-2016 checkpoint: UDP6 console plans, cross-site replication through gateway/NAT, manual replication/merge and WindowsCore CLI; PowerShell interface documented. No exact end 2016 scalability matrix established. Documented automation interface only; no official MCP maturity is implied. Evidence A. v6guide

AI say-do sample: 3 recorded announcement rows; 0 GA/shipped matches, 0 preview/early/limited at announcement, 3 partial, 0 pending, 0 slipped, 0 dropped. Preview-at-announcement overlaps outcome counts. These are promise-row counts, not unique announcements or counts of released AI features; omissions/overlaps in the AI research ledger are preserved. "Shipped" may be a vendor availability assertion rather than an independently verified first-GA day.

Reading

Arcserve is combining recovery validation with immutable storage and guided management. The record shows delivered malware and anomaly controls, while UDP11 and regional availability clocks need care. Separate storage and runbook entitlements can add dependencies beyond the UDP engine.

Open questions and evidence caveats

Unchanged annual values carry the last scored release; they do not certify a frozen compatibility matrix or exact first-feature GA. Some checkpoint-derived jumps may lag the true first shipment.
Unverified AI strands receive zero credited evidence; this is a conservative estimate rather than a vendor-wide absence claim. Preview/limited capabilities add at most half a point beyond the preceding established score.
Say-do counts are a bounded research sample. Same-day/release-note announcements and post-release blogs are not promises delivered instantly. Missing outcome dates do not prove non-delivery.
Commercial/exit terms not reconstructed use explicit provisional midpoint estimates; executed regional contracts may differ.
11.0 malware scans can miss moved/renamed files with unchanged timestamps; future fix not credited. UDP11 Proxmox earns only a half-step because actual GA/build matching is incomplete. ArcGenie score applies to documented hosted console, not all on-prem deployments.